$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a383530303a3a2f34302d3430203d3e20323134383039.roa File: 326130613a363034343a383530303a3a2f34302d3430203d3e20323134383039.roa (raw, json) Hash identifier: McKOo0wjCF+L16RdYNwznvhAMt5vLhEjMFMiKNyOz1k= Subject key identifier: EE:6F:6F:B5:17:AF:0E:6F:EA:81:6E:14:44:68:C0:B8:CE:D6:3D:34 Certificate issuer: /CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC Certificate serial: 159337B4B3BAECC301F3B2C3C9E67E42E6CA318C Authority key identifier: 43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a383530303a3a2f34302d3430203d3e20323134383039.roa Signing time: Fri 11 Apr 2025 01:21:10 +0000 ROA not before: Fri 11 Apr 2025 01:16:10 +0000 ROA not after: Fri 10 Apr 2026 01:21:10 +0000 asID: 214809 IP address blocks: 2a0a:6044:8500::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.mft rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 19:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:93:37:b4:b3:ba:ec:c3:01:f3:b2:c3:c9:e6:7e:42:e6:ca:31:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC Validity Not Before: Apr 11 01:16:10 2025 GMT Not After : Apr 10 01:21:10 2026 GMT Subject: CN=EE6F6FB517AF0E6FEA816E144468C0B8CED63D34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:70:13:bc:6c:61:17:2f:f8:1e:19:67:90:0a: c2:93:ab:33:76:35:8b:2a:ac:4a:ba:7e:cd:87:1f: 46:4f:06:49:ef:f7:f4:52:df:8f:c0:ac:ac:19:30: ea:5d:fe:43:76:0c:86:d2:a9:f4:a6:61:b9:26:14: f5:13:b1:7a:97:8e:06:f8:a0:28:53:90:ab:6c:df: 66:38:f3:ca:37:f1:5c:5f:a4:6a:b9:89:1e:b6:fd: c9:e4:cf:ea:7e:88:f9:86:55:0b:86:0c:d0:e5:71: f7:a0:35:bd:b4:4a:8e:5e:1d:8a:04:7a:db:06:e1: 49:e3:a3:0a:62:39:3e:e4:bf:8a:d8:a3:7e:c9:fb: 61:94:aa:a4:54:99:a7:cc:1f:b8:9e:e9:1b:73:cf: 43:32:0f:e1:dd:13:9a:3f:56:d7:05:74:60:23:44: 8b:6c:39:59:aa:16:ad:4f:fb:6f:ec:df:68:4a:ed: b5:95:f2:23:cf:53:04:32:5d:76:ba:df:5d:7a:33: b4:3b:41:7f:88:51:11:54:99:e3:b4:2e:77:61:85: 51:31:4a:dc:17:7a:67:b7:c2:e6:30:93:c5:5d:e8: 83:ab:d6:14:29:97:90:d5:ca:12:d6:0d:3f:47:3a: 9d:76:11:1e:15:f1:b9:13:64:17:a5:b4:bf:84:5f: ad:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6F:6F:B5:17:AF:0E:6F:EA:81:6E:14:44:68:C0:B8:CE:D6:3D:34 X509v3 Authority Key Identifier: keyid:43:88:AF:62:9C:70:2D:DA:88:FA:6B:B2:A9:55:DB:8F:24:ED:2B:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4388AF629C702DDA88FA6BB2A955DB8F24ED2BBC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/4/326130613a363034343a383530303a3a2f34302d3430203d3e20323134383039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:8500::/40 Signature Algorithm: sha256WithRSAEncryption 92:a9:eb:29:07:d3:e3:c3:8c:c0:45:cb:74:b9:d7:33:54:ba: db:bf:d8:d2:df:aa:3d:ad:c0:85:b3:f2:a9:07:5f:e0:ae:9f: 2e:1c:9e:a6:32:4e:a1:58:5b:26:41:dc:4b:6f:31:e9:33:99: e1:f6:ac:8c:4c:c9:82:d4:ae:48:c3:f5:95:80:17:b6:cc:f4: 71:d3:9b:8d:18:44:00:6b:d1:a2:26:52:63:da:9c:9c:1f:51: cf:19:8e:1b:1f:0a:91:bc:48:43:65:3e:0a:ed:6f:8f:2a:dd: d5:4b:8c:5b:e0:f9:98:d1:6e:b1:cd:3d:55:a3:9f:f0:86:b5: 4c:74:e7:09:cc:da:0c:0d:80:7f:69:04:39:26:05:60:9f:42: 40:1c:ec:80:48:99:67:7c:50:95:6e:9c:29:f0:81:49:d2:29: 57:7e:46:31:12:25:6b:97:33:42:4a:4f:dd:4d:dc:6f:88:c6: 55:22:a3:aa:78:28:44:66:8f:cb:79:86:e3:9d:b2:67:57:16: ec:54:4a:ff:e8:61:36:9a:26:90:52:51:15:46:9d:df:46:45: 50:74:f5:6a:3c:16:c5:9d:1e:f7:67:7f:12:e8:dd:af:2a:d5: 66:e1:77:4e:03:7c:70:ed:eb:8b:ef:9c:f1:09:77:ed:40:8b: 08:cd:a4:b0 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUFZM3tLO67MMB87LDyeZ+QubKMYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM4OEFGNjI5QzcwMkREQTg4RkE2QkIyQTk1NURCOEYy NEVEMkJCQzAeFw0yNTA0MTEwMTE2MTBaFw0yNjA0MTAwMTIxMTBaMDMxMTAvBgNV BAMTKEVFNkY2RkI1MTdBRjBFNkZFQTgxNkUxNDQ0NjhDMEI4Q0VENjNEMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5cBO8bGEXL/geGWeQCsKTqzN2 NYsqrEq6fs2HH0ZPBknv9/RS34/ArKwZMOpd/kN2DIbSqfSmYbkmFPUTsXqXjgb4 oChTkKts32Y488o38VxfpGq5iR62/cnkz+p+iPmGVQuGDNDlcfegNb20So5eHYoE etsG4UnjowpiOT7kv4rYo37J+2GUqqRUmafMH7ie6Rtzz0MyD+HdE5o/VtcFdGAj RItsOVmqFq1P+2/s32hK7bWV8iPPUwQyXXa63116M7Q7QX+IURFUmeO0LndhhVEx StwXeme3wuYwk8Vd6IOr1hQpl5DVyhLWDT9HOp12ER4V8bkTZBeltL+EX631AgMB AAGjggKEMIICgDAdBgNVHQ4EFgQU7m9vtRevDm/qgW4URGjAuM7WPTQwHwYDVR0j BBgwFoAUQ4ivYpxwLdqI+muyqVXbjyTtK7wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2 MmNiLzQvNDM4OEFGNjI5QzcwMkREQTg4RkE2QkIyQTk1NURCOEYyNEVEMkJCQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5 ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy80Mzg4QUY2MjlDNzAyRERBODhGQTZCQjJB OTU1REI4RjI0RUQyQkJDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS80OTFhNDNiYy03NmVjLTRhYmUtYmE3ZC1lNzNlOTBkNjYyY2IvNC8zMjYxMzA2 MTNhMzYzMDM0MzQzYTM4MzUzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIz MTM0MzgzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgRIUwDQYJKoZIhvcNAQELBQADggEBAJKp 6ykH0+PDjMBFy3S51zNUutu/2NLfqj2twIWz8qkHX+Cuny4cnqYyTqFYWyZB3Etv MekzmeH2rIxMyYLUrkjD9ZWAF7bM9HHTm40YRABr0aImUmPanJwfUc8ZjhsfCpG8 SENlPgrtb48q3dVLjFvg+ZjRbrHNPVWjn/CGtUx05wnM2gwNgH9pBDkmBWCfQkAc 7IBImWd8UJVunCnwgUnSKVd+RjESJWuXM0JKT91N3G+IxlUio6p4KERmj8t5huOd smdXFuxUSv/oYTaaJpBSURVGnd9GRVB09Wo8FsWdHvdnfxLo3a8q1Wbhd04DfHDt 64vvnPEJd+1AiwjNpLA= -----END CERTIFICATE-----Generated at Tue Apr 29 11:32:10 2025 by rpki-client